Tag: cve-2020-8831 (1)

CVE Reproduction > Reproducing CVE-2020-8831: Privilege Escalation via Symlink Attack on Apport's Lock File Implementation

Vulnerability: CVE-2020-8831 breaks the invariant that Apport’s lock file is created atomically as a real file in a trusted location (without following symlinks), which is violated when an attacker pre-creates a symlink at the lock path so Apport opens/writes the symlink target and enables local privilege escalation.